Wag is an authentication gateway for WireGuard that lets each device reach only the routes it should, and asks for a second factor before the sensitive ones open. Admins write access policies for everyone, groups, or single users, marking subnets, hosts, ports, and protocols as MFA-required, always allowed, or denied, and the most specific prefix wins, so one allowed address can sit inside a protected range. Devices join with a registration token, and the public endpoint answers with a finished WireGuard profile. Users then confirm a TOTP code, a WebAuthn security key, an OIDC single sign-on login that maps identity provider groups into Wag groups, or a PAM prompt, and repeated failures lock the account. Session lifetime and idle timeouts decide when they must prove themselves again. The browser portal lists users, devices, rules, registration tokens, and webhooks with real-time notifications, while a command line locks devices, resets MFA, and manages administrators. Webhooks turn JSON from an HR or identity system into new tokens or removed users and devices, and clients can fetch the list of guarded routes from a small API. Remote staff, contractors limited to one host, and homelabs are typical uses. When a server fails, the VPN remains reachable through clustering with witness nodes or an external etcd, and certificates arrive through ACME with HTTP-01 or Cloudflare DNS-01. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

One library for the books you read and the books you listen to: Chaptarr manages audiobooks and eBooks side by side, so the same title can live on your server as a chaptered M4B and an EPUB without two separate apps fighting over it. It knows the difference between editions and narrators, which means a dramatized production, an unabridged reading, and the print text can coexist as first-class versions of one work. Multi-part releases and multi-file recordings are handled as single books, and MP3 audiobooks can be converted into one chaptered M4B with chapters preserved or inserted where they are missing. Separate root folders keep audiobooks and eBooks apart, or place eBooks alongside their audio twins; either way, matching uses file tags, folder names, and release metadata to attach files to the right book automatically. Series are organized for you, metadata profiles control which languages belong in your library, and flexible renaming tokens produce filenames that read the same way a human would shelve them. Custom quality profiles per library drive automatic upgrades when a better release appears, and the standard download clients and indexer integrations from the *arr family plug straight in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

LaraOwl watches your Laravel applications from your own server, streaming every request, exception, slow query, and attack attempt into one live dashboard. Install one Composer package in each app, point it at your LaraOwl server, and requests arrive with method, path, status, duration, and middleware timing attached. Exceptions group themselves by fingerprint with stack traces, occurrence counts, and first and last seen times, so a resolved bug that comes back announces itself. Slow queries and N+1 patterns are flagged with execution times, jobs report failures and retries, and scheduled tasks check in like heartbeats that complain when they stop. A built-in security lens scores threats such as SQL injection, cross-site scripting, and path traversal, tracks hostile IPs, and can push a block into your Cloudflare firewall in one click. Uptime checks run every thirty seconds, alerts fan out to Slack, Discord, Telegram, email, or any webhook, and throttles keep a bad night from becoming a thousand messages. Teams organize multiple projects with their own tokens, thresholds, and retention policies, and daily pruning keeps last quarter's noise from filling the disk. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Hosting finished documentation for many projects at once, Docat leaves every uploaded version online for the readers still on version 2. Zip the static HTML that MkDocs, Sphinx, or mdBook produced. Send it to a project and version with curl or the docatl command line client. Tag the newest build as latest, and links get a stable address. Readers land on a home page that opens on starred favourites. A search box narrows the list, and its queries can be shared as links. Instance statistics report documents, versions, and storage. Inside any docs page, a version dropdown with a latest label moves between releases. Uploads are open at first. Claim a project and it returns a token that must accompany every later version upload or deletion. The same token hides versions from the dropdown and from search, and each project can carry its own icon. Operators can mount a small config file for custom header and footer HTML, raise the 100 MB default archive limit with an environment variable, and put nginx basic authentication in front of the write endpoints. Swagger UI and ReDoc pages at /api/docs and /api/redoc document the HTTP API for pipeline authors. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Once a voice agent is imported or built, Lampline connects it to a phone line, sends an AI caller to grade real calls, and keeps it all on your own server. Start by importing a Dialogflow CX or CX Agent Studio export along with a report of anything to check, or build fresh in a drag-and-drop builder that mixes LLM steps with scripted pages for exact lines and form fields. Next, pick one of 20 model providers, including Claude, OpenAI, Gemini, Bedrock, Groq, and DeepSeek, or run Ollama with local speech and no API keys. Test by chat or microphone while each step lights up, and let agents call HTTP and MCP tools and save records in collections of their own. Then connect callers through Twilio, Telnyx, or any SIP trunk, PBX, or session border controller via jambonz, with transfers to a person that carry the call's details as SIP headers. Finally, evals phone the agent over a real line, where an AI Test Caller brings background noise, accents, and interruptions, grades each transcript check by check, and reports typical and p95 response times as callers hear them. Each agent stays a folder of YAML and Markdown that you can review in git and lint or test with the vk CLI. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A Day One alternative that keeps your most personal writing on your own server: Journiv is journaling purpose-built for self-hosters. The FastAPI backend runs on SQLite by default with optional PostgreSQL, Redis, and Celery for background work, behind a clean, minimal web UI. Unlike general note-taking apps, it ships the features journaling actually needs: customizable moods and mood groups, activity tracking, goals with automated progress from logged activities, and daily writing prompts filterable by category and difficulty so a blank page never stalls you. Quick Log captures a moment in seconds and expands into a full entry later; "On This Day" resurfaces entries from past weeks, months, and years. Multiple journals separate work, gratitude, and personal writing, with tags and full-text search across everything, plus media uploads with automatic thumbnails and an Immich integration for linking photo-library memories. Analytics chart mood trends and writing patterns over time. Data portability is taken seriously: native import of Day One exports, JSON/Markdown/HTML export, and a standalone HTML viewer that opens your archive in any browser with no server running. OIDC single sign-on works with Authentik or Keycloak, and multi-arch images cover amd64 and arm64.

ShopNex is a self-hosted ecommerce platform that gives merchants a browser admin, themeable storefront, hosted checkout, and app integrations without paying a platform subscription or per-sale software fee. You manage products with options, variants, SKUs, stock per variant, collections, product images, and clean URLs, then sell through a bundled Astro storefront using Liquid themes or a custom frontend connected to the typed Storefront SDK. The hosted checkout collects shipping rates, manual payment methods, discount codes, and Stripe Checkout payments, while order records keep payment and fulfillment status, shipping lines, transactions, and price snapshots separate for clean operations. Customer accounts and guest orders are matched by email, staff access is invite-only with owner, admin, and staff roles, and discounts, shipping, taxes, and store settings are controlled from the admin. Integrations receive signed Standard Webhooks with retries and admin redelivery, scoped API tokens grant only the resources an app needs, and OAuth apps clean up tokens and webhooks when uninstalled. You can run one shop by default or switch to multi-shop by domain without migrating data, and every admin and storefront procedure is also exposed as REST under /api/v1 with a live OpenAPI document. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Marble gives your blog, changelog, or product updates a calm editorial home, then hands clean JSON to whatever website you already built. Writers work in a focused rich-text editor with headings, lists, code blocks, images, video, and embeds, while a readability score quietly grades each draft as it grows. Every post carries authors, one category, tags, a cover image, and typed custom fields, so a changelog entry and a long guide can share one predictable structure. Your frontend pulls sanitized HTML or Markdown through the REST API or typed SDK, filtering by category, tag, or search in a single request. Read-only public keys serve published posts safely, while scoped private keys unlock drafts and write access for the tools you trust. Uploads of images, video, audio, and documents land in a media library with alt text and dimensions, ready to embed anywhere. Signed webhooks announce every change to your site, Slack, or Discord with retries and a delivery log, and an MCP server lets AI agents search and draft content too. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Eliminating repetitive sponsor reads and dynamic mid-roll commercials before an episode even reaches your headphones, MinusPod operates as a self-hosted podcast ad-removal server and RSS feed manager. You subscribe to shows inside the web dashboard using PodcastIndex search or OPML import, and the server generates clean replacement RSS feeds compatible with Pocket Casts, Overcast, Apple Podcasts, and Audiobookshelf. When a new episode drops via scheduled polling or instant Podping notifications, the pipeline transcribes the audio locally with faster-whisper or Parakeet, or routes it through a remote transcription API. Your choice of LLM provider, including Ollama, Anthropic Claude, OpenRouter, or any OpenAI-compatible endpoint, scans overlapping transcript windows to pinpoint sponsor reads, cross-promotions, and intros. Programmatic audio analysis reinforces AI detection by measuring EBU R128 loudness jumps, Chromaprint acoustic fingerprints, show jingles, and dynamically inserted ad transitions before FFmpeg splices the audio or marks segments as skippable Podcasting 2.0 chapters. A browser-based Ad Editor lets you audition pre-cut and post-cut audio, nudge start and end timestamps, and confirm detections that train global, network, and show-specific sponsor patterns. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One server, treated properly: Nanocl runs your containers and full virtual machines from a single declarative Statefile, reconciling what is running against what the file says, so a lone host gets cluster discipline without cluster ceremony. Containers group into Cargoes with replica counts, ordered init containers, and health-aware restarts; finite jobs run to completion and stop. When a workload needs a real kernel or a custom disk image, it boots as a QEMU virtual machine beside the containers instead of forcing a second platform. Publishing is built in: the proxy controller terminates TLS and routes HTTP and TCP traffic, and the DNS controller keeps service names resolving while workloads come and go. Secrets for registries, certificates, and environment variables attach where they are used, never inside the file itself. The daily loop is a CLI and an API: list processes, follow logs, exec into a container, watch events, and back up the entire deployment state before you change it. Namespaces keep projects apart on the same host, and Statefile arguments, templates, and sub-states carry one definition from staging to production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT or Apache-2.0 licensed.

With nearly 600 GitHub stars and a feature set that rivals commercial note apps, Glass Keep is the self-hosted Google Keep alternative that wraps a full-featured notes system in a glassmorphism UI with blurred backdrops, translucent modals, and smooth transitions. The React and Vite frontend renders notes in a masonry card grid with pinning, color themes, tag chips, and drag-and-drop reordering. Text notes support Markdown with headings, bold, italic, strikethrough, blockquotes, and fenced code blocks, while checklists offer inline editing, drag-to-reorder items, and direct toggle from the grid without opening the note. A freehand drawing mode provides customizable brush sizes and colors for handwritten notes. The private AI assistant runs an optimized Llama 3.2 (1B) model entirely inside the Docker container using RAG over your own notes, answering queries like "what are my AWS commands?" without any data leaving your server. Deep search spans titles, Markdown text, tags, checklist items, and image names. Import notes from Google Keep via Takeout JSON files or export your entire vault as JSON with per-note Markdown downloads. The Express backend with better-sqlite3 requires no external database. Real-time collaboration enables shared checklists with live item toggling. Dark and light themes persist across sessions, and the PWA manifest supports installation on any device. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

To design relational database schemas visually and generate production-ready SQL migrations without writing boilerplate DDL by hand, developers use StackRender, an interactive browser-based schema modeling studio. Users can start from a blank drag-and-drop Entity Relationship Diagram canvas or import existing SQL DDL scripts directly from PostgreSQL, MySQL, MariaDB, SQLite, Oracle, and Microsoft SQL Server databases. Each table node provides granular control over column data types, lengths, precision, character sets, collations, nullability, uniqueness, primary keys, composite indexes, and custom PostgreSQL enum types. When connecting tables across one-to-one, one-to-many, and many-to-many relationships, the schema analyzer checks for circular foreign key dependencies and suggests performance indexes on frequently joined columns. As a schema evolves over time, the visual state-diff engine records every structural modification and generates paired UP forward-migration and DOWN rollback scripts, accurately translating table and column renames into non-destructive ALTER statements rather than dropping and recreating data. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Monitoring dozens of self-hosted containers, RSS feeds, and web services from a single customizable startpage becomes effortless with Dynacat, a dynamic dashboard engine driven by declarative YAML configuration and live data widgets. You can arrange multi-tab layouts in the browser-based visual editor by dragging widgets across columns and picking color themes, and Dynacat automatically writes every adjustment back to your configuration file. Built-in widgets aggregate RSS and Atom feeds, Reddit communities, Hacker News, Lobste.rs, YouTube channel uploads, Twitch streams, weather forecasts, stock and crypto market tickers, and software releases across GitHub, GitLab, Codeberg, and Docker Hub. Homelab operators can inspect and control Docker containers, track server CPU, memory, and disk mountpoints, monitor AdGuard Home or Pi-hole DNS statistics, view Sonarr and Radarr release calendars, and manage torrents across qBittorrent, Deluge, and Transmission from one screen. For custom services, the visual widget builder connects to any JSON endpoint and binds UI blocks to response fields without manual template coding, while the Dynawidgets catalog imports community widgets with a single slug. Every widget refreshes independently on its own schedule and exposes cached data through a local JSON API, with OpenID Connect group rules securing private admin pages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every homelab deserves a control center that looks as good as the services it manages. Lab Dash gives you a customizable, drag-and-drop dashboard where every tile earns its spot. Add shortcut widgets linking to your Plex, Grafana, Nextcloud, or any service with automatic health check indicators showing green or red status at a glance. The system monitoring widget displays real-time CPU usage, memory consumption, network throughput, disk utilization, and temperature readings by mounting the host /sys directory as a read-only volume. Integrate Pi-hole stats, qBittorrent download progress, and media server widgets for Jellyfin, Plex, or Emby directly on your grid. Multiple pages let you organize services by category, and the search bar finds any tile instantly. Customize the background image from a local upload or URL, set a custom title and tab name, and choose your preferred search provider including self-hosted options like SearXNG. All sensitive configuration data is encrypted locally with AES-256-CBC, and only administrator accounts can modify the layout. Install Lab Dash as a Progressive Web App on desktop, phone, or tablet for a native app experience with offline capability. Configurations export as backup files for easy migration between instances. On RepoCloud, deploy Lab Dash on a dedicated VPS with root SSH access and Docker socket connectivity under the GPL-3.0 license.

Write standard SQL queries and watch Shaper turn them into interactive dashboards, scheduled reports, and customer-facing analytics widgets without maintaining a heavy business intelligence stack. Every query maps directly to a visual component through simple type casts like BARCHART, LINECHART, GAUGE, BOXPLOT, or DROPDOWN. Analysts can attach external PostgreSQL and MySQL databases, read Parquet, CSV, JSON, and Excel files straight from S3 object storage, or stream live events into the HTTP ingest API. Interactive filter controls let viewers slice metrics by date ranges, multi-select dropdowns, and dynamic parameter variables that automatically re-evaluate downstream charts. Teams version-control their entire reporting layer as plain SQL files in Git, making dashboard updates auditable in pull requests and simple for AI coding assistants to generate. Product engineers embed white-labeled analytics directly into customer web apps without iframes, issuing per-tenant JWT tokens to enforce row-level data isolation. Need scheduled deliverables for stakeholders? Configure SQL-driven background tasks that transform datasets on a cron schedule, send threshold alerts to Slack or Microsoft Teams, and generate downloadable PDF, PNG, Excel, or CSV reports. External collaborators can also view live metrics through password-protected sharing links. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Staying on top of hundreds of RSS feeds is impossible when every reader just dumps articles in chronological order. RSSMonster takes a different approach: it evaluates, scores, and prioritizes every article so the signal rises above the noise. The three-pane reading interface automatically marks articles as read when you scroll past them, while the built-in quality scoring engine rates content by freshness, originality, trust, and attention metrics. Compose advanced search expressions using field operators like star:true, quality:>0.6, hot:true, and date filters like @today or @lastweek, then save those expressions as persistent Smart Folders for one-click access to curated views. Semantic event clustering groups related articles across sources so you see one coherent story instead of fifteen duplicates. Connect your favorite mobile client through the Fever API (supporting Reeder for iOS) or the Google Reader API (compatible with News+, FeedMe, Vienna RSS, and ReadKit). The AI chat assistant powered by the Model Context Protocol lets you ask questions about your feed content and get summarized answers. Import your existing subscriptions via OPML, switch between light and dark themes, and install the app as a Progressive Web App for offline reading. On RepoCloud, deploy RSSMonster on a dedicated VPS with root SSH access, full data ownership, and persistent storage under the MIT license.

Transform folders of DRM-free PC installers and retro game archives into a browsable, cover-art-rich digital storefront with Gameyfin, a self-hosted video game library server for LAN parties, homelabs, and family networks. Point the server at your mounted storage directories and its automated scanner indexes game archives, executables, and multi-part installers while showing real-time progress and estimated completion times. Bundled metadata plugins pull game synopses, release dates, developer credits, screenshots, and high-resolution box art from IGDB, Steam, and SteamGridDB according to your configured provider priority. Players can browse collections by genre or platform, inspect detailed game pages, and download installers directly through their web browser or via a built-in BitTorrent tracker and seeding client that distributes bandwidth across LAN participants. Administrators can manage multiple isolated libraries, trigger quick or full folder scans, customize UI themes including colorblind-accessible palettes, and enforce single sign-on via OAuth2 and OpenID Connect identity providers. Every cover image and metadata record is cached locally on disk so offline LAN events keep full browsing and download functionality without internet access. Built-in Prometheus actuator endpoints expose library and runtime metrics for infrastructure monitoring dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Ocular provides a modern personal finance workspace that plots your household income and expenditures across multi-year horizons to eliminate surprises in annual budgeting. Users can define custom income streams, configure recurring fixed obligations like rent and utilities, and allocate discretionary spending allowances into designated category groups. Interactive Sankey diagrams and cumulative balance curves visualize projected net savings trajectories, signaling upcoming cash crunches months in advance. The annual planning matrix breaks down monthly figures across twelve periods, calculates automatic net savings, and highlights active fiscal cycles. Keyboard shortcuts accelerate data entry with inline arithmetic expression evaluation directly inside currency cells. Built-in multi-currency conversion and localization settings allow international households and remote professionals to manage diverse revenue streams effortlessly. A dedicated privacy mode masks sensitive monetary amounts when working in public spaces, while complete ledgers export cleanly as portable JSON archives. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.